| 摘要 |
<p>A system includes a safety relevant component that generates a data packet in response to receiving a request to perform a task and that communicates the data packet. The system further includes a first fail-safe chassis that continuously generates a first chassis health signal, determines whether the data packet is valid, and selectively determines whether to de-assert the first chassis health signal based on the determination. The system also includes a second fail-safe chassis that continuously generates a second chassis health signal, determines whether a copy of the data packet is valid, and selectively determines whether to de-assert the second chassis health signal based on the determination. The system further includes a safety relay box module that determines whether to instruct the first fail-safe chassis to operate in a predetermined mode based on the first chassis health signal and the second chassis health signal.</p> |
